medium4.6
CVE-2009-2312
SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for this file, which allows local us…
Impact
SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for this file, which allows local users to gain privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mcafee | Smartfilter | Version 4.2.1.00 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0314.html
- http://secunia.com/advisories/34390
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49338
- http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0314.html
- http://secunia.com/advisories/34390
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49338